Create an IAM user

This topic describes how to create an Identity and Access Management (IAM) user. An IAM user is an identity corresponding to an O&M person or an application.

An IAM user has no permission by default. You need to grant the IAM user permissions to access corresponding resources.

Prerequisites

You have logged in as the root user or as an IAM user with the IAMFullAccess permission.

Procedure

1. Log in to the IAM console.

2. In the left navigation pane, choose Identities > Subusers. The Subusers page appears.

3. Click Create User. The Create User page appears.

4. Enter the required information in the User login information section as prompted.

   Username: the username of the IAM user. This parameter is required. After the IAM user is created, the username cannot be changed.
   Display name: the display name of the IAM user. You can define it based on your business requirements. This parameter is required.
   E-mail: the email address for receiving messages. This parameter is optional.
   Cellphone number: the phone number for receiving messages. This parameter is optional.
   Receive message: Specifies whether to receive messages. After it is enabled, the
   E-mail and Cellphone number parameters are required.

5. Select an access mode in the Access Mode section. To ensure your account security, we recommend that you select only one access mode.

   Console Password Logon: If you select this access mode, you need to set the Console Password, Password Reset, Login Protection, Operation Protection, and Sub-users view all items parameters.
   Programmatic Access: If you select this access mode, the system automatically generates an AccessKey for the IAM user. The IAM user can access Kingsoft Cloud by using API operations or other development tools.

6. Click Submit.

What to do next

• You can attach policies to the IAM user so that the IAM user can access the corresponding resources.
• You can add the IAM user to IAM groups and grant permissions to the IAM groups.
• After the IAM user is created and granted permissions, you can log in to the Kingsoft Cloud console as the IAM user.